Design/Logic Flaw

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

CVE-2011-1978

CVE-2011-1978 affects Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, where improper validation of the System.Net.Sockets trust level allows information disclosure or triggering arbitrary outbound network traffic via crafted XBAP, ASP.NET, or .NET Framework applications. Connected sources (MS11-0...